Matrix Sydent: Input validation error vulnerability

Matrix Sydent is an implementation of the Matrix Authentication Server API from the Matrix.org Foundation in the UK. Sydent suffers from a security vulnerability that can be exploited by an attacker to send arbitrary e-mail from a Sydent e-mail address...

Envoy input validation vulnerability

Envoy is an open source distributed proxy server. versions prior to Envoy 1.71.1 are vulnerable to integer overflow, which can be exploited by an attacker with an excessive grpc-timeout value to cause an unexpected timeout calculation...

Google Chrome: Vulnerability in input validation

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72 in the "QR scanner". An attacker can exploit this vulnerability to bypass security restrictions...

Juniper Networks Junos OS input validation error vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to an input validation error vulnerability, no details of the vulnerability are provided at this ti...

Juniper’s various products have vulnerabilities related to input validation errors.

The Juniper Networks EX4300 and Juniper Networks EX4600 are both Juniper Networks products.The Juniper Networks EX4300 is a 4300 series enterprise switch.The Juniper Networks Juniper Networks EX4600 is a 4600 series enterprise switch. Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Serie...

Eaton Intelligent Power Manager has a vulnerability related to input validation.

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...

Google Chrome: Input validation error vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A remote code execution vulnerability exists in the Google V8 engine, which can be exploited by an attacker to execute arbitrary code...

Microsoft Windows Input Validation Vulnerability

Microsoft Windows is a desktop operating system from Microsoft. A security vulnerability exists in the Windows application compatibility cache. An attacker could exploit this vulnerability to cause a denial of service attack...

Microsoft Windows Console Driver Input Validation Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A denial of service vulnerability exists in the "console driver" in Microsoft Windows and Windows Server,...

Windows Installer input validation error vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA Microsoft Windows is an operating system for personal devices and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Windows Installer in Microsoft...

CVE-2020-15734

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

CVE-2020-15734

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

Design/Logic Flaw

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

CVE-2020-15734 Same-origin policy vulnerability in Bitdefender Safepay

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

PT-2021-9803

Name of the Vulnerable Software and Affected Versions Bitdefender Safepay versions prior to 25.0.7.29 Description An Origin Validation Error issue allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories...

CVE-2020-15734: Origin Validation Error

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

Exiv2 heap buffer overflow vulnerability (CNVD-2021-29115)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. Exiv2 suffers from a heap buffer overflow vulnerability. The vulnerability stems from improper validation of input to the rawData.size property in Jp2Image::readMetadata in jp2image.cpp. An attacker could...

Cisco Small Business RV110W, RV130W, RV215W: input validation error vulnerability

The Cisco RV110W, among others, is a router from the U.S. company Cisco. An input validation error vulnerability exists in the Cisco Small Business RV110W, RV130, RV130W, and RV215W that could allow an unauthenticated, remote attacker to execute arbitrary code on the affected devices...

Cisco SD-WAN vManage Software has a vulnerability related to input validation.

Cisco?SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A security vulnerability exists in Cisco?SD-WAN vManage Software that could be exploited by an unauthenticated, remote attacker to execute...

nodejs input validation error vulnerability

nodejs is a JavaScript runtime environment based on the ChromeV8 engine through the Chromev8 engine for the packaging and the use of event-driven and non-blocking IO applications so that the development of high-performance Javascript background applications has become possible . Node.js netmask...